Merge code injection into one <script>

This change sets up later security enhancements like SRI and `type="module"`

diff --git a/index.html b/index.html
index a123f1b75a0174ea500d4063d35b99fc0c58dd7d..c41bfa6eb9ac6a1804e3599e66d8199dac7fbcdf 100644 (file)
--- a/index.html
+++ b/index.html
@@ -258,8 +258,9 @@
     document.querySelector('#download').addEventListener('click', e => {
       e.preventDefault();
       const encrypted = document.querySelector('#ciphertext').textContent;
-      const scriptInjection = `<script>const content = '${encrypted}'; ${decrypt.toString()}<\/script>`;
-      const output = template.replace('<template id="script-injection"></template>', scriptInjection);
+      const script = template.match(/<script.*>([\s\S]*)<\/script>/i)?.[1];
+      const injectedScript = `const content = '${encrypted}'; ${decrypt.toString()} ${script}`;
+      const output = template.replace(/(<script.*)>[\s\S]*<\/script>/i, `$1>${injectedScript}<\/script>`);
       downloadHtml(output, `${Date.now()}.html`);
     })
 

diff --git a/template.html b/template.html
index e23d765cd60529cf1f5202fe0f1dec25e248e180..e0eec3a1f538daf0aac94ab7bd340e52729e5406 100644 (file)
--- a/template.html
+++ b/template.html
@@ -54,7 +54,6 @@
     </form>
   </main>
 
-  <template id="script-injection"></template>
   <script>
     const input = document.querySelector('input');